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EXECUTIVE  SUWWRT 

The  January,  1977  revisions  of  DODD’s  5000,1  and  5000,2 
have  definitised  the  national  policy  of  pursuing  NATO  standard- 
ization and  interoperability  throuph  v/eapon  system  acquisition. 
This  p:oal  can  be  achieved  by  sale  of  U.S.  systems  to  NATO, 
purchase  of  NATO  systems  by  the  U.S,,  or  multi-national  develop- 
ment and  production  proprams.  At  the  same  time  that  propram 
manapers  are  responding  to  this  policy  direction,  however,  they 
must  also  respond  to  national  policy  to  protect  information 
vital  to  U.S.  security.  This  poal  is  achieved  by  compliance 
with  various  directives  on  information  security  and  technolopy 
transfer. 

Thus  a propram  manaper  can  be  faced  with  conflicting 
goals.  On  the  one  hand,  he  has  been  directed  to  implement 
NATO  standardization;  on  the  other  hand,  he  may  be  constrained 
from  disclosing  aspects  of  his  program  to  NATO  agencies.  The 
dilemma  can  be  avoided  by  thorough  analysis  and  careful  planning 

The  key  to  minimizing  potential  conflicts  between  the 
policy  of  NATO  standardization  and  the  policy  of  protecting 
vital  U.S.  data  is  to  understand  that  no  two  releasability- 
standardizatlon  situations  are  the  same,  Ha^rever,  certain 
general  cases  can  be  identified.  The  general  cases  are  a 
function  of  two  factors:  what  type  of  data  are  involved  and  to 
whom  it  might  be  disclosed.  In  situations  involving  NATO 
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standardization,  the  data  types  are  threat  data,  U,S.  system 
capabilities/vulnerabilities,  and  techno] oyy.  The  disclosee 
categories  are  NATO  rovernments,  NATO  industry,  and  non-NATO 
buyiny  governments.  These  factors  can  be  structured  as  a 
three-by-three  matrix  vhich  isolates  nine  general  cases  of  the 
standardization-releasability  conflict . 

For  each  general  case  there  are  several  strategies  v/hich 
can  be  apnlied  to  achieve  NATO  standardization  while  still 
protecting  U.S*  data.  These  strategies  involve  such  mechanisms 
as  Data  Exchange  Apreements,  sanitized  system  engineering 
documents,  use  of  NATO-developed  threat  data,  and  the  like, 

Implementinp  any  of  the  stratepies  involves  the  inputs  of  two 
relatively  nev  members  of  the  propram  manapement  team:  foreipn 
disclosure  specialists  and  administrative  security  personnel. 

Once  propram  office  personnel  have  identified  the  general 
case  which  most  closely  resembles  the  situation  they  face,  they 
can  develop  a stratepy  for  resolving  the  standardization- 
releasability  conflict.  In  all  cases,  the  most  important 
aspect  is  Planning,  If  the  possibility  that  NATO  standardiza- 
tion might  impact  a program  is  recognized  at  the  outset,  then 
it  can  be  accomodated.  If  provisions  for  NATO  standardization 
are  an  afterthought,  releasabil ity  problems  are  bound  to 
result. 
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SECTION  I 


INTRODUCTION  j 

In  late  1^76,  a respected  periodical  reported  "Defense 
Secretary  Donald  H.  Rvmsfeld  will  emphasise  standardization 
in  the  North  Atlantic  Treaty  Organization  ...  and  offer 

strong  advice  to  his  replacement  to  continue  the  effort  j 

(3:11)."^  Yet,  only  an  advertising  page  away  from  that 
statement,  a senior  Defense  Department  official  is  quoted  as 
beinp-  "seriously  concerned  about  certain  long-term  implica- 
t'  f engineering  and  manufacturing  technology  transfer  i 

iig  from  the  export  and  overseas  production  of  U.S. 
weapon  systems  (3:9).  The  contrasting  statements  represent 
two  diametrically  opposed  policies  of  the  United  States 
Government,  and  the  organization  where  they  finally  clash 
is  the  Program  Office, 

Purpose  of  the  Study  Project 

The  purpose  of  this  rerort  is  two-fold.  The  first  is 
to  document  the  new  dilernna  which  confronts  program  managers 
as  a result  of  having  to  balance  the  drive  for  North  Atlantic 
Treaty  Organization  (NATO)  standardization  with  the 

iThis  notation  will  be  used  throughout  the  report  for 
sources  of  quotations  and  major  references.  The  first 
number  corresponds  to  the  Ij  sting  of  the  source  in  the 
bibliography.  The  second  number  is  the  page  in  the 
reference. 
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requirements  for  information  security  and  restrictions  on 
technolopy  transfer.  The  second  is  to  sUFp;est  some  '//ays  in 
■vhich  the  conflict  can  be  minimized,  if  not  eliminated, 

Fropram  manapement  has  always  required  diplomatic  skills. 

A 100%  safe  system  may  be  too  complex  for  any  human  to  oper- 
ate; while  a system  perfect  from  the  human  factors  standpoint 
may  be  unmaintainable.  Similarly,  the  eventual  user  of  the 
system  usually  wants  it  soon;  while  the  system  enpineers 
often  want  more  time  in  developmant  to  achieve  ultimate 
performance.  So  the  necessity  to  balance  disparate  influences, 
directives,  and  interest  proups  is  nothinp  new. 

^That  is  new,  hoiwever,  is  the  challenpe  to  comply  with 
recent  (January,  1977)  direction  to  implement  NATO  stand- 
ardisation and  interoperability  throuph  acquisition  proprams. 
The  challenpe  results  from  the  fact  that  habits,  procedures, 
regulations,  and  inspection  criteria  which  insure  100< 
compliance  with  the  Department  of  Defense  (DOD)  Information 
Security  Propram  and  various  strictures  on  the  transfer  of 
IJ.S.  technology  to  foreign  governments  and  contractors  in- 
hibit interchange  with  NATO.  The  conflict  between  the  direc- 
tives for  NATO  standardization  and  the  directives  for  safe- 
guarding information  can  be  minimized  or  avoided,  but  to  do 
so  will  require  ne'w  ways  of  thinking,  ne«r  procedures,  and 
higher  management  emphasis.  Just  as  program  managers  have 
coped  with  dichotomous  viewpoints  before,  so  will  program 
managers  cope  with  this  ne<v  conflict.  This  report  seeks 
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both  to  define  the  rroblem  and  to  suppest  possible  '-rays  to 
approach  the  situation  so  that  propram  manapers  can  strike 
an  optimum  balance  beWeen  international  cooperation  and 
national  information  security. 


Score  and  Limitations 


For  much  of  the  defense  establishment,  no  conflict  exists. 
A b.S.  unit  in  Europe  either  can  use  munitions  from  a German 
depot  or  it  can’t.  Those  involved  in  propramminp  and  budpet- 
inp  may  see  different  dollar  amounts  as  a result  of  NATO  off- 
sets, but  they  see  no  conflict.  Even  headquarters  levels  in 
the  system  acquisition  process  perceive  no  problem.  Only  in 
the  propram  office  'vhere  interfaces  are  controlled,  desipns 
are  approved,  and  data  are  centralized  does  the  conflict 
become  apparent.  For  this  reason,  the  scope  of  this  report 
is  limited  to  the  system  propram  office. 

The  scope  is  also  limited  by  the  fact  that  DOD  Directives 
5000,1  and  5000,2  levy  a requirement  for  standardization  and 
interoperability  with  NATO  only.  The  report,  therefore,  is 
concerned  only  with  proprams  with  NATO  ramifications.  Pro- 
prams  involvinp  only  non-NATO  nations  present  no  problem  at 
this  time  since  the  information  security  policies  are  un- 
challenped. 

Even  where  NATO  is  concerned,  the  rercrt  focusses  on 
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Straip’htfor'/ard  P’oreipn  Military  Sales  (FMS)  nroprams  in- 
volve little  'conflict  since  an  end  item  is  delivered,  alonp 
with  cneration  and  support  data,  in  a configuration  which 
is  controlled  by  appropriate  executive  and  legislative  branch 
procedures.  As  a result,  the  scone  of  this  report  is  narrcrver 
than  FMS  as  such. 

Yhereas  the  scope  of  the  report  is  bounded  by  the  scope 
of  the  conflict,  several  limitations  result  from  constraints 
on  the  report  itself.  The  most  important  of  these  limitations 
is  that  the  report  relies  solely  on  unclassified  sources  and 
is  therefore  unclassified.  Use  of  classified  documents 
would  do  little  more  than  permit  use  of  greater  detail  in 
examples;  no  premises  or  conclusions  'would  be  altered. 

The  final  limitation  on  the  report  is  the  consequence 
of  two  assumptions.  One  assumption  is  that  the  conflict 
must  be  resolved  'within  the  existing  framci^ork  of  foreign 
disclosure  and  technology  transfer  policies.  The  second 
assumption  is  that  NATO  standardization  'will  continue  to  be 
a goal  of  United  States  foreign  and  defense  policy.  The 
most  obvious  answers  to  a conflict  between  NATO  standardiza- 
tion and  releasability  of  US  data  ''rould  be  to  modify  the 
disclosure  and  transfer  regulations  or  to  give  less  support 
to  NATO  standardization.  Ho-wever,  those  solutions  are  '>rell 
beyond  the  authority  of  a program  manager  and  are  therefore 
not  considered. 
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The  next  section  of  this  report  will  explore  the 
parallel  heirarchies  of  direction  which  result  in  difficul- 
ties in  the  program  office.  First  it  will  discuss  the 
rationale  and  implementation  of  NATO  standardization  and 
interoperability.  Then  it  will  consider  the  rationale  and 
implementation  of  directives  p’overninp  foreipn  disclosure 
and  technology  transfer, 

■Vith  these  two  schools  of  thought  as  background,  the 
study  will  define  the  conflict  ’vhich  can  occur  and  some  of 
its  ramifications.  '.*/hile  the  problem  is  relatively  new, 
several  examples  can  be  cited. 

Once  the  conflict  is  defined,  the  first  step  toivard  re- 
solving it  is  to  formulate  an  approach  to  analyzing  specific 
standardization-releasability  conflicts.  Such  conflicts  can 
be  analyzed  in  terms  of  the  type  of  data  which  is  involved 
and  the  type  of  organization  which  requires  the  information. 
This  breakdown  of  the  problem  results  in  a three-by-three 
matrix  which  can  be  used  to  reduce  the  conflict  to  manage- 
able size. 

Given  the  analytical  frame-irork,  the  report  will  discuss 
each  data  type  - disclosee  pair  in  the  matrix.  It  wi]l 
suggest  ideas  on  how  to  resolve  the  conflict  for  each  of 
these  general  cases.  Some  involve  new  ways  of  looking  at 

interfaces.  Others  consider  alternative  sources  or  protection 
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systems  for  classified  information  such  as  threat  data. 

Still  more  postulate  altered  manapement  procedures.  The 
suppestions  are  neither  exhaustive  nor  ful]y  tested.  Perhaps, 
thouph,  they  will  provide  a basis  for  other,  better  ways  for 
propram  manapement  offices  to  work  toward  NATO  standardiza- 
tion while  providinp  full  protection  to  US  information  and 
technolopy. 


SECTION  II 


BACKGROUND 

J 

■j 

NATO  Standardization 

The  most  persuasive  arpument  for  NATO  standardization 
is  interoperability,  Ho"/  persuasive  is  best  illustrated  by 
consiaerinp-  the  conseauences  oi  not  navinp  it.  In  tne  event 
of  conflict  between  NATO  and  the  Warsaw  Pact,  the  followinp 
scenarios  could  nappen  without  it,  A U,S,  Air  Force  I'ipnter 
pilot  linos  his  base  has  been  closed  by  an  attack  and  is 
diverted  to  a Royal  Air  Force  (RAF)  base,  without  inter- 
operability the  RAF  has  no  lombs  which  fit  his  racks  or  shells 
for  his  pun,  and  he  cannot  fly  a combat  mission.  Likewise 
a German  tank  company  on  its  way  to  the  front  pulls  into  a 
supply  point  to  load  ammunition  only  to  find  that  it  is  a 
U.b,  Army  unit  with  only  U,S,  Army  munitions.  As  a result 
the  tanks  roll  away  with  an  average  of  only  two  rounds  apiece. 

Or  perhaps  an  Italian  escort  vessel  in  the  Mediterranean 
sans  alongside  a U,S,  Navy  oiler  to  receive  fuel,  but  the 
American  vessel’s  hose  fittings  are  found  to  be  incompatible 
with  Italian  ones.  Only  interoperability  prevents  such 
possibilities.  It  is  little  wonder  that  after  a NATO  visit 
in  late  1976  two  U,S,  Senators  declared  "Interoperability 
and  standardization  oi  arms  and  equipment  must  be  relent- 
lessly pursued"  (l:8l). 
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If  the  operational  advantages  of  NATO  standardization 
are  accepteu,  then  other  reasons  add  impetus  to  the  drive 
for  it.  Foremost  among  tnese  is  the  efficient  use  of  scarce 
reseax-cii  and  development  (H&u)  resources  within  zu*t  alliance: 
money,  facilities,  and  tecnnicai  talent.  In  his  statement  to 
Congress  on  tae  Fiscal  Tear  (FT)  1977  Researcn,  oevelopment , H 

Test,  and  Evaluation  program,  the  Director  of  Defense  Research  j 

and  Engineering  (DDR&E)  reported  ”the  U.S,  ...  should  take  the 

{ 

lead  in  cooperation  in  international  research  and  development"  | 

(5tVIII-l),  Cooperation  is  required  because  at  the  time  of  j 

the  DDR&E  statement,  seven  NATO  nations  were  pursuing  ground 
radar  R&D  programs,  seven  were  developing  new  ship  classes, 

1 

six  were  conducting  R<fcD  on  avionics,  five  were  building  new  : 

helicopters  and  new  jet  fighters,  and  four  nations  had  on-  ^ 

going  tank  programs  (5:VTTI-13).  Even  if  competition  by  two 

d 

or  three  parties  were  retained,  resources  withdrawn  from  | 

redundant  programs  could  provide  solutions  to  other  operational 
requirements  which  are  otherwise  unans'wered  for  lack  of  R&D 
resources. 

An  equally  compelling  case  can  be  made  for  cooperation 
in  the  production  of  weapon  systems  and  components.  Even 
with  provisions  for  two  sources  for  every  item  (to  avoid  being 
crippled  by  strikes  or  political  decisions)  economies  of  scale 
resulting  from  concentrating  production  would  lead  to  signifi- 
cant reductions  in  the  acquisition  cost  of  military  hardware. 

S 


Add  to  these  savings  those  associated  with  not  spendinf  money 
for  equinpinp  multiple  production  lines  and  those  associated 
with  having  fewer  items  in  the  supply  system,  and  the  possi- 
bilities either  for  buying  more  items  or  for  reductions  in 
defense  spending  become  apparent.  Another  result  of  extending 
the  production  runs  of  systems  and  components  is  that  the 
nroduction  base  is  more  likely  to  exist  if  conflict  should 
occur  and  replacements  are  needed, 

A strong  defense  is  of  little  value  to  a nation  on  the 
verge  of  economic  co2 lapse.  Thus,  the  military  strength  of 
NATO  depends  on  the  economic  strength  of  its  members,  NATO 
standardisation  can  contribute  to  the  members'  economies  in 
several  ways.  One  way  stems  from  production  cooperation.  By 
extending  the  length  of  production  runs,  employment  can  be 
stabilized.  A second  way  results  from  the  more  efficient 
use  of  defense  funds,  making  money  available  for  more  troops, 
more  weapons,  or  other,  non-defense  use,  A third  important 
way  is  a consequence  of  technology  transfer.  If,  as  in  the 
past,  military  systems  Incorporate  the  latest  technology,  the 
sharing  which  results  from  NATO  cooperation  will  cross-fertil- 
ize various  industries  in  the  member  countries.  An  official 
of  the  Office  of  tne  Assistant  Secretary  of  Defense  for 
International  Security  Affairs  recognized  this  aspect  of  the 
F-l6  co-production  program  when  he  stated  "During  the  life  of 
the  program,  the  advanced  technology  associated  with  the  system 
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be  transferred  to  the  Europeans...”  (^^:6) 
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The  United  States  receives  an  additional  economic  ad- 
vantage from  NATO  standardisation.  Standardisation  today 
theoretically  results  In  offset  ayreements  so  that  partlcl- 
patinp  countries  receive  iv^ork  equal  in  value  to  'vhat  they 
buy,  but  offset  calculations  should  include  total  defense 
expenditures  In  a piven  country  by  a particular  partner. 
Because  of  the  hiph  cost  of  maintaininp  U.S.  forces  in  NATO, 
such  offset  calculations  ’fould  permit  a favorable  balance  of 
weapon  receipts  for  the  U.S.  This  benefit  is  in  addition 
to  the  savinps  lihherent  in  standardisation. 

The  militarv  and  economic  advantapes  of  NATO  standard- 
isation have  been  recopnised  in  various  policies  of  the 
United  States  povernment.  In  1976  the  Conpress  passed  and 
the  President  sipned  into  law  provisions  for  waiver  of  the 
Buy  America  Act  in  cases  where  NATO  standardization  would  be 
enhanced.  This  policy  of  the  Lepislatlve  and  Executive 
branches  has  been  tested  and  uoheld  in  the  Judicial  branch. 
The  test  case  involved  a complaint  by  a U.S.  manufacturer 
that  procurement  of  .50  caliber  machine  puns  for  U.S.  tanks 
front  Belpiura*s  Fabrique  Nationals  (FN)  was  unlawful.  The 
povernment  was  vindicated,  and  the  Army  is  procurlnp  a weapon 
which  is  not  only  standard  in  other  NATO  forces  but  which  is 
of  better  quality  than  any  U.S.  product, 

iYlthln  the  Denartment  of  Defense,  several  policy 


\ 
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directives  have  been  Issued  to  further  the  drive  for  NATO 
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standardization,  DODD  4120,18  details  tne  introduction  of 
the  metric  system  in  the  U,S,  military.  Since  the  United 
States  was  the  only  NATO  member  'vhich  had  not  previously 
adopted  the  metric  system,  standardization  will  be  enhanced 
by  tnis  stet>  (2:33),  Of  most  impact  to  propram  manapers 
however,  is  the  issuance  or  revised  DODD’s  ^000,1  and  5000,2 
in  January,  1V77,  One  of  the  major  chanpes  in  these  directives 
is  preat  emphasis  on  NATO  standardization.  One  parapraph  in 
UODD  5000.1  no>,v  states  ”'Vhen  a new  develooment  or  modification 
is  essential,  the  mission  needs  of  other  DOD  components  and 
NATO  shall  be  considered  inciudinp  the  requirement  for  NATO 
standardization  and  interoperability"  (7.6),  This  policy  is 
implemented  further  in  the  new  DODD  5000,2.  iipecifically , 
at  Milestone  I NATO  standardization  and  interoperability 
requirements  must  have  been  "adequately  considered"  while  at 
Milestones  II  and  III  NATO  standardization  ana  interoperability 
requirements  must  nave  been  "satisfied"  (8:Kncl,2), 

Emphasis  on  NATO  standardization  is  not  liKeiy  to  po 
away.  Numerous  Memoranda  of  Underatandinp  (MOU)  have  already 
been  sipned  with  NATO  nations  for  trade  or  co-production. 

The  F-l6  and  FN  macnine  pun  proprams  w;iich  illustrate  co- 
proauction  or  purcnase  amonp  NATO  nations  have  been  mentioned. 
Other  examples  include  tne  Franco-uerman  Roland  air  defense 
missile  which  is  oeinp  produced  in  the  U.b.  lor  tne  Army  anu 
the  British  Harrier  which  has  been  delivered  to  the  U.S, 

Marine  uorps.  And  indications  are  that  tne  new  administration 
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will  continue  tne  policy.  Tne  new  Director  of  the  state 
Department’s  laireau  of  Politico-Military  Afiairs,  writing  in 
Foreign  Policy  Magasine  oeiore  assuming  his  joD,  stated  tnat 
conventional  weapons  trade  with  Natu  was  not  controversial 
(y:A»). 

Vny  Protect  U.S.Data 


The  most  persuasive  argument  for  protecting  U.S,  data 
is  security,  Hov  nersuasive  is  best  illustrated  by  considering 
the  consequences  of  not  having  it.  In  the  event  of  conflict 
between  NATO  and  the  'Varsaw  Pact,  the  follaving  scenarios 
could  happen  without  it,  A U.S,  Air  Force  fighter  squadron, 
assigned  to  destroy  a command  center,  carries  precision 
guided  munitions  to  the  target.  But  because  an  agent  in  an 
Alliance  factory  producing  the  same  munition  has  obtained  its 
design,  the  Varsaw  Pact  can  counter  the  guidance  system  and 
the  target  survives.  Or  perhaps  a U.S.  Army  artillery  battery 
is  ordered  into  action  only  to  be  bombed  and  destroyed  en 
route  because  the  orders  were  intercepted  on  radios  copied  by 
the  Soviets  from  a sample  smuggled  out  of  a European  depot. 
Similarly,  a U.S.  Navy  destroyer  in  the  Mediterranean  is  sunk 
by  a cruise  missile  which  homes  on  the  ship’s  radar  emissions 
while  jamming  them.  This  Pact  capability  is  the  result  of 
poor  electronic  warfare  discipline  by  a similarly  equipped 
NATO  ship  several  years  before.  It  is  little  wonder  that 
such  documents  as  the  DOD  Information  Security  Program 
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Regulation  lay  dovn  stringent  requirements  to  control  and 
protect  classified  information  on  ner-r  or  deployed  '•reavon 
systens. 

If  the  operational  advantages  of  protecting  U.S.  data 
are  accepted,  then  other  reasons  add  impetus  to  the  drive  to 
protect  them.  Foremost  amonp  these  is  the  need  to  protect 
threat  data.  If  the  U.S,  understanding  of  the  threats  our 
forces  face  became  widely  knc^m,  the  sources  of  our  information 
could  probably  be  inferred  by  our  pot^tial  adversaries.  As 
a result  they  could  cut  off  our  sources,  and  threat  information 
would  be  denied  us.  ''/Ithout  knov-zledee  of  the  threat,  U.S. 

V 

designers  mipht  not  provide  weapon  systems  capable  of  defeat- 
inp  enemy  systems. 

Another  factor  which  supports  withholdinp  of  U.S.  data  is 
industrial  readiness.  In  the  event  of  a conflict  in  Europe, 
U.S.  forces  must  be  certain  of  reliable  sources  of  replace- 
ment weapons  and  parts.  For  this  reason,  all  items  and  com- 
ponents must  be  domestically  rUnufactured  so  that  supplies 
are  not  cut  off  by  military,  terrorist,  or  political  action. 

In  order  to  maintain  our  industrial  base,  defense  contracts 
must  be  provided  to  U.S.  contractors. 

An  equally  compellinp  case  can  be  made  for  protectinp 
U.S,  technoloyy.  Even  if  there  were  no  operational  conse- 
quences to  orovidinf  technology  to  other  nations,  the  economic 
consequences  could  be  dire.  If,  after  the  Investment  of  many 


dollars  in  research  and  development,  the  U.S.  government 
permitted  uncontrolled  export  of  hiph  technology,  U.S. 
companies  vould  find  themselves  competing  at  home  and  abroad 
apainst  foreipn  manufacturers  who  had  copied  or  duplicated 
the  new  technolopy.  Prominent  Britons  arpue  that  the  trans- 
fers of  riphts  to  radar  and  jet  enpine  developments  to  the 
U.S.  durinp  ’^orld  Var  II  are  at  least  partly  responsible  for 
the  decline  of  the  British  economy. 

The  U.S.  has  an  additional  economic  interest  in  pro- 
tectinp  its  data.  As  lonp  as  our  technolopy  is  in  the  fore- 
front, other  nations  which  desire  state-of-the-art  weapon 
systems  must  come  to  the  U.S.  to  buy  them.  Such  Forelpn 
Military  Sales  (FMS)  provide  a favorable  balance  of  trade  as 
well  as  diplomatic  leverape,  Futhermore , by  extendinp  the 
production  runs  of  U.S,  systems,  the  capital  costs  of  plant 
and  equipment  are  spread  over  more  units,  resultinp  in 
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savinps  to  the  Department  of  Defense,  Likewise,  part  of  the 
price  of  FMS  sales  can  be  a recoupment  of  R&D  costs  which  is 

I 

a further  savinps  to  DOD, 

The  military  and  economic  advantapes  of  protectinp  U,S, 
data  have  been  recopnized  in  various  policies  of  the  United 
States  povernment.  The  basic  classification  scheme  is  de- 
lineated in  Executive  Orders,  and  the  lepality  of  the  system 
has  been  upheld  in  the  courts  several  times.  Various  apencies 

I in  the  povernment  have  issued  implementinp  directives  to  cover 

topics  such  as  atomic  enerpy,  intellipence  Information,  export 


n 


licenses,  and  the  like.  Vithin  the  Department  of  Defense, 
directives  deal  -^ith  Wo  ma.ior  topics:  information  security 
and  foreipn  disclosure. 


These  directives  impact  the  program  manager  in  the  same 
Wo  areas.  The  information  security  directives  require  pre- 
paration of  3 Classification  Guide  for  every  system.  By 
assessing  the  potential  harm  to  the  U.S.  of  the  disclosure 
of  particular  data  items,  members  of  the  prop'ram  office  and 
information  security  specialists  determine  what  the  classifi- 
cation of  those  items  is.  The  guide  then  becomes  directive, 
and  information  classified  according  to  it  is  handled  under 
the  provisions  of  the  DOD  Information  Security  F'rogram  Regula- 
tion and  service  implementing  procedures.  Foreign  disclosure 
decisions,  on  the  other  hand,  are  handled  outside  the  program 
office  by  foreign  disclosure  specialists,  and  all  requests 
for  disclosure  must  be  referred  to  th«n.  The  classif ication 
of  a data  item  is  a ma.ior  factor  in  the  decision  as  to  whether 
or  not  it  can  be  disclosed. 


Emphasis  on  protecting  U.S.  data  is  not  likely  to  go 
away.  In  spite  of  major  controversies  surrounding  publication 
of  the  Pentagon  Papers,  the  deletion  of  material  from  books  by 
ex-CIA  employees,  and  the  leak  of  information  from  a Congres- 
sional committee  investigating  the  CIA,  there  has  been  no  call 
to  do  away  with  procedures  for  protecting  information  vital  to 
the  security  of  the  United  States. 
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SECTION  III 

THE  FROBLEM  IN  THE  PROGRAM  OFFICE 
Goal  Conflict 

As  ■fe  have  seen,  the  United  States  government  has 
adooted  t'vo  imnortant  oolicies.  First,  we  are  dedicated  to 
NATO  standardiaation.  Second,  we  intend  to  protect  informa- 
tion vital  to  national  security.  In  one  sense  the  goals  of 
standardization  and  protection  are  complementary.  To  the 
extent  that  NATO  forces  grov  more  effective,  U.S.  national 
security  is  enhanced.  And  to  the  extent  that  U.S,  data  is  veil 
protected,  the  effectiveness  of  U.S.  forces  in  NATO  is  en- 
hanced. So  both  goals  are  laudable. 

However,  situations  could  arise  in  which  the  goals  are 
at  cross  purposes.  Suppose  that  NATO  effectiveness  could  be 
enhanced  by  adopting  throughout  the  Alliance  a U.S.  electronic 
warfare  system  to  defeat  'Warsaw  Pact  anti-aircraft  gun  and 
missile  systems.  But  also  suppose  that  the  compromise  of 
that  electronic  warfare  system  would  result  in  decreasing 
the  effectiveness  of  the  U.S.  strategic  nuclear  deterrent. 
Should  the  objective  of  NATO  standardization  take  precedence? 
Or  should  the  objective  of  protecting  vital  U.S,  data  take 
precedence? 
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Prorram  Office  as  Intersection  Point 

A decision  of  such  pxavity  mipht  'veli  be  made  at  a hiph 
level.  That  narticular  decision  mipht  be  made  by  Cabinet 
members,  the  level  'vhich  oripinated  the  two  policies  whose 
poals  are  in  conflict.  In  fact,  however,  the  key  level  in 
such  a poal  conflict  situation  is  the  one  at  which  attempts 
to  implement  both  policies  result  in  the  problem.  For  if 
the  problem  is  unrecognized,  or  if  it  is  mishandled  or  if  it 
results  in  a wrong  decision  at  that  level;  the  consequence 
may  be  detrimental  to  both  U.S.  national  security  and  the 
interests  of  NATO, 

The  intersection  of  the  two  policies  does  not  normally 
occur  at  the  Department  of  Defense  level.  The  standardiza- 
tion policy  falls  within  the  purview  of  the  Director  of 
Defense  Research  and  Engineering,  The  policies  on  information 
security  emanate  from  elsewhere  in  the  department.  Likewise, 
the  goals  flow  down  through  different  functional  chains  in 
the  services  and  in  the  headquarters  of  the  various  acquisition 
commands.  The  organization  in  which  they  intersect,  and 
therefore  might  conflict,  is  the  program  office.  For  it  is 

a 

in  the  program  office  that  DOD  managers  both  originate  weapon 

j 

system  data  and  protect  it.  It  is  the  program  manager  who  is  ] 

responsible  for  specifying  NATO-standard  features,  originating 
classification  guides,  evaluating  NATO  industry  proposals. 
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protecting  classified  information  on  threat  or  capabilities, 
and  penerally  intepratinp  the  myriad  of  elements  »//hich  com- 
prise a modern  defense  system.  The  propram  office  is  the 
orpanization  vhich  sits  at  the  intersection  point  of  the 
national  policy  to  implement  NATO  standardization  with  the 
national  policy  to  protect  U.S.  data  in  the  interests  of 
national  security. 

The  problem  is  not  an  unlikely  one.  Even  such  mundane 
items  as  traininp  equipment  can  be  affected.  For  example, 
the  MOU  with  the  European  Participatinp  Governments  (EPG) 
which  are  procuring  F-l6  aircraft  stipulates  that  10  per  cent 
of  the  value  of  U.S.  aircraft,  kO  per  cent  of  the  value  of 
EPG  aircraft,  and  15  uer  cent  of  the  value  of  aircraft  sold 
to  third  parties  will  be  produced  in  the  EPG  economies.  One 
tecnnical  area  in  which  the  offset  work  might  be  oil ered  is 
aircrew  traininp  devices.  Hawever,  as  the  U.S.  has  heretofore 
done  business,  security  restrictions  and  technolopy  transfer 
policies  would  prevent  placing  aircrew  traininp  equipment 
contracts  with  European  contractors.  For  one  thing,  designing 
and  producing  a device  which  authentically  replicates  the 
actual  F-l6  would  require  disclosure  of  tne  fire  control 
algorithms  and  other  operational  flight  program  characteristics 
which  are  the  neart  of  the  F-l6’s  performance.  Other  aspects 
ol  tne  F-16  system  would  also  be  identified  to  the  training 
equipment  contractor.  To  properly  reproduce  the  electronic 
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w^arl'are  environment  lor  a pilot  trainee  reouires  data  on 
both  the  electronic  -varfare  devices  installed  in  the  air- 
ci aft  and  the  capabilities  and  characteristics  of  the 
electronic  warfare  tnreat.  The  same  problem  arises  in 
providing  proper  training  for  air-to-air  and  air-to-ground 
’veapon  delivery.  Clearly,  the  goals  of  NATO  standardization 
ana  protection  of  V.S.  data  are  in  conflict. 

The  program  manager  in  this  situation  is  laced  with 
tnree  choices.  First,  he  can  restrict  training  device 
competition  to  U.S.  companies  and  find  onsets  else'/here. 
Second,  he  can  seek  to  release  the  U.S,  data  at  the  risk  ol 
damage  to  nat.,unal  security.  Third,  he  can  implement  ne^v 
ways  Ol  doing  business  so  that  ne  can  solicit  European 
contractors  without  releasing  vital  U.S.  data. 

Because  the  program  office  is  located  at  the  point  of 
goal  conflict,  it  is  the  site  oi  origination  of  potential 
problems,  conversely,  it  is  also  the  site  of  origination  of 
potential  solutions,  tareiul  analysis  of  potential  coniiict 
situatioiisj  and  proper  planning  to  minimize  problems  v,an  result 
in  satisfying  ootn  goals.  Tne  remainder  of  this  paper  is 
devoted  to  suggesting  an  approach  which  permits  just  that. 
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MATRIX  APPROACH  TO  ANALYZING  A REI EASABI LITY  SITUATION 
"A  Rose  is  not  a Rose" 

Careful  analysis  of  a potential  standardiaation-releasaMl- 
ity  conflict  is  the  most  important  step  to  minimizinp  problems. 
Both  the  magnitude  of  the  problem  and  the  ranpe  of  solutions 
change  as  the  situation  changes.  The  problems  posed  by  dis- 
cussing threat  information  'vith  a military  officer  from  a NATO 
country  are  much  different  than  the  problems  associated  with 
permitting  a non-NATO,  buying  government  to  have  access  to  n&-r , 
high-technology  manufacturing  processes.  This  fact  is  crucial 
to  avoiding  erabarassment  in  the  process  of  implementing  NATO 
standardization  while  protecting  vital  U.S.  data.  There  is  no 
single  "standardization-releasabillty  problem;”  there  is  no 
one  ”standardization-releasability  solution.” 

The  two  major  characteristics  of  any  standardlzation- 
releasability  conflict  are  what  kind  of  data  is  involved  and 
to  whom  it  might  be  released.  Each  combination  of  these  two 
characteristics  results  in  a distinct  situation. 

Disclosee  Categories 

In  situations  which  involve  NATO  standardization,  three 
categories  of  possible  foreign  disclosees  can  be  identified. 
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These  categories  are  NATO  government,  NATO  industry,  and  non- 
NATO  buying  government,  Vfhile  these  categories  are  nearly 
self-exnlanatory , some  elaboration  is  required. 

The  category  "NATO  government"  Includes  defense  agencies 
of  governments  w^hich  are  members  of  the  NATO  military  ailiance. 
Thus  Canada  is  included  while  France  is  not.  Likewise, 
Britain's  Royal  Air  Force  is  included  while  education  minis- 
tries are  not.  This  category  does  not  differentiate  between 
NATO  allies  who  have  signed  MOU’s  and  those  who  have  not.  It 
also  makes  no  distinction  as  to  whether  a IJ.S.  system  is 
being  adopted  by  NATO  or  whether  the  U.S.  is  adopting  a NATO 
system. 

The  category  "NATO  industry"  includes  any  orranization , 
government  or  privately  oi/ned,  located  within  countries  which 
are  members  of  the  NATO  military  alliance  that  is  a potential 
contractor.  The  definition  implies  that  such  companies  or 
arsenals  have  or  could  qualify  for  defense  contracts  from 
their  own  governments.  Here  again  the  situation  could  be 
either  NATO  production  of  a U.S,  system  or  U.S.  production  of 
a NATO  system. 

The  category  "non-NATO  buying  government"  includes  any 

■r> 

Potential  customer  for  a NATO-standard,  U ,S, -designed  or 
produced  system  who  is  not  a member  of  the  NATO  military 
alliance.  "NATO  standard"  in  this  context  does  not  Include 
items  which  have  been  supplied  by  the  U.S.  to  NATO  through 
direct  foreign  military  sales.  That  is,  if  sale  of  a U.S. 
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system  to  a non-NATO  povernment  does  not  involve  offset  or 
co-production  apreements  ^^/ith  NATO  allies,  normal  Foreipn 
Military  Sales  procedures  would  be  applied.  This  catepory 
does  include  sale  by  a NATO  nation  to  a third  party  of  a system 
to  which  the  IJ.S.  has  contributed  data  or  technolopy. 

Data  Catepories 

Just  as  there  are  three  catepories  of  disclosee,  so  are 
there  three  catepories  of  data.  These  catepories  are  threat, 

U.S,  system  capabilities  and  vulnerabilities,  and  technolopy. 

Here  apain  the  catepories  are  nearly  self-explanatory,  but 
"ome  elaboration  is  required. 

‘’Threat"  data  is  restricted  to  the  threat  which  is  common 
to  the  United  States  and  its  NATO  allies.  ^ith  minor  exceptions, 
the  threat  data  is  thereby  limited  to  the  Varsaw  Pact  and  to 
those  forces  and  systems  which  could  be  used  in  a European/ 

North  Atlantic  scenario,  Stratepic  nuclear  forces  are  one 
obvious  example  of  the  type  of  threat  which  is  not  included  in 
this  cauepory, 

"U.S.  system  capabilities  and  vulnerabilities"  data  in- 
clude performance  parameters,  desipn  details,  and  employ- 
ment information.  It  includes  those  aspects  of  systems  and 
equipment  which  would  be  disclosed  to  potential  users.  Nuclear 
delivery  capabilities  and  tactics  would  be  excluded  under  this 
definition.  Ho"/ever,  this  catepory  does  include  disclosures 
which  mipht  be  made  in  the  course  of  detailinp  U.S.  deficiencies 
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or  requirements  to  the  developer  of  a NATO  system  in  nhich 
the  U.S,  is  interested, 

"Technolog>"  includes  design  concepts,  manufacturing 
techniques,  scientific  principles,  instruments,  and  machinery 
’vhich  are  inherent  in  the  development  and  production  of  a 
system  or  equipment.  These  data  are  defined  to  be  those  'vhich 
have  been  paid  for  by  II. S,  industry  or  the  U.S.  government. 

The  question  of  control  over  technology  developed  under  whole 
or  partial  b.S.  government  funding  by  a NATO  establishment 
is  a particularly  difficult  one  which  is  included  in  this 
category. 


Data-Disclosee  Matrix 

Each  pair  of  data  category  and  disci osee  category  con- 
stitutes a separate  case  of  the  standardization-releasabi] i ty 
conflict.  One  way  to  visualize  the  possible  combinations  is 
to  construct  a three-by-three  matrix  of  the  data  and  disclosee 
categories  (Figure  1), 

Figure  1 represents  the  key  to  handling  releasability 
situations  which  arise  as  the  result  of  working  tcrvard  NATO 
standardization.  Analyzing  the  facts  of  the  particular  situa- 
tion to  determine  what  matrix  entry  represents  the  general 
case  will  lead  program  office  personnel  to  the  types  of 
strategies  which  might  be  applied  in  the  given  case.  The  next 
section  will  deal  with  each  of  the  general  cases  individually. 
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DATA  - DISCLOSEE  MATRIX 
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SECTION  V 


STRATEGIES  TO  RESOLVE  CONFLICT 
Threat  Data  to  NATO  Government 

In  some  respects  this  situation  is  the  easiest  to  work 
around.  Since  the  U.S,  and  her  NATO  allies  are  concerned 
with  a common  threat  where  standardization  is  involved,  sev- 
eral channels  already  exist  for  povernment-to-povernment 
threat  sharinp,  Vhere  a formal  Data  Exchanpe  Apreemert  (DEA) 
exists,  transfer  of  threat  data  may  be  possible  without 
further  effort,  Foreipn  disclosure  nersonnel  have  this 
information  and  serve  as  the  conduit  for  exchanpe  of  threat 
data. 

If  no  DEA  exists  or  if  its  provisions  do  not  pertain  to 
the  threat  data  of  concern,  one  possible  solution  is  to 
create  or  modify  a DEA.  This  process  is  a time  consuminp  one, 
however,  and  must  be  larpely  left  to  the  foreipn  disclosure 
community.  The  hipher  the  priority  of  the  propram,  the  more 
possible  this  stratepy  becomes. 

A third  solution  to  the  problem  of  threat  data  releas- 
ability  lies  in  usinp  the  NATO  developed  threat.  If,  upon 
examination,  the  NATO  threat  appears  valid  for  application 
to  the  propram,  it  can  be  used.  Implementlnp  this  stratepy 
requires  adoptlnp  additional  administrative  security  proce- 
dures peculiar  to  handJinp  NATO-classified  materials. 


Guidance  in  this  area  is  available  front  administrative 
security  functional  experts.  Once  the  administrative  proce- 
dures have  been  adopted,  it  becomes  a relatively  routine 
process  to  request  needed  data  through  service  channels  to 
the  appropriate  component  commands  in  NATO. 


Vhen  the  United  States  is  interested  in  purchase  or 
joint  development  of  a NATO  system  which  oripinates  in  an 
Alliance  povernment  owned  arsenal  or  factory,  that  case 
should  be  considered  in  the  catepory  of  U.S.  System  Capabil- 
ities/Vulnerabilities to  NATO  Industry. 

^en  the  case  involves  sale  of  a U.S.  system  to  NATO, 
difflcuJties  evaporate  once  the  U.S,  povernment  and  a NATO 
povemment  have  nepotiated  an  apreement  for  the  sale.  Those 
sub-systems  or  components  which  are  included  in  the  sale  are 
disclosed  freely  while  those  which  are  not  included  in  the 
sale  are  withheld, 

A problem  can  arise  prior  to  an  apreement,  however.  At 
early  stapes  the  best  stratepy  is  to  depend  on  open  data  to 
initiate  discussions.  U.S,  contractors  are  best  equipped  to 
provide  such  information  and  are  familiar  with  the  procedures 
for  obtaininp  clearances  to  exhibit  at  such  trade  fairs  as 
the  Paris  Air  Shaw,  Considerable  propram  office  effort  is 
often  required  to  facilitate  these  demonstrations,  but  the 
releasabillty  problem  is  insipnif icant  once  the  decision  has 
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been  made  to  permit  display. 

At  the  stape  of  negotiations  where  a serious  prospective 
customer  needs  information  in  greater  denth  and  detail,  a Data 
Exchange  Agreement  eases  the  difficulty,  ifhen  one  does  not 
exist  or  is  inadequate,  once  again  the  best  approach  is  to 
initiate  or  modify  one  with  the  aid  of  the  foreign  disclosure 
community. 

Perhaps  the  easiest  way  to  minimize  problems  in  this 
matrix  category  is  to  frequently  and  conscientiously  review 
the  nrogram*s  security  classification  guide.  As  systems  prog- 
ress through  the  acquisition  cycle,  many  categories  of  data 
require  a lesser  degree  of  protection.  Administrative  security 
specialists  can  be  of  assistance  in  assuring  that  releasability 
problems  do  not  occur  because  of  a behind-the-times  classifica- 
tion guide. 

Technology  Transfer  to  NATO  Government 

rfhere  the  potenuiux  transfer  of  technology  to  a NaTu 
government  uuucuma  a NATO  goveriuaent  owueu  factoiy  or  arsenal, 
it  should  be  considered  In  the  category  of  Technology  Transfer 
to  NATO  Industry, 

Yith  the  above  exclusion,  this  category  becomes  a rare 
one,  Momaliy,  exchanges  between  the  TT.3.  government  and 
NATO  governments  on  weanon  systems  and  equipment  are  limited 
uo  the  *Vhats"  rather  than  the  "ho'ws*.  That  is,  what  an  item 
can  do  is  of  legitimate  interest  to  potential  buyers;  how  it 
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does  it  or  how  to  make  it  is  seldom  their  concern.  In  those 


instances  where  such  transfer  is  necessary  it  must  be  covered 
by  a DEA. 

Threat  Data  to  NATO  Industry 

This  category  is  best  avoided.  Most  instances  in  which 
it  appears  that  the  tnreat  might  have  to  be  released  are  tne 
result  of  "business  as  usual"  in  the  program  ofiice.  Often 
the  drafters  of  specifications  and  statements  of  work  either 
incorporate  the  threat  or  append  it,  rfhen  the  possibility  of 
NATO  co-proQuction,  NATO  offsets,  or  U.S.  pxurchase  of  a MATO 
development  exists,  additional  effort  must  be  extended  to 
sanitize  such  system  engineering  docxunents.  One  ap’^roach 
is  to  make  them  functional;  that  is,  expressed  in  terras  of 
what  outputs  are  necessary. 

'Yhen  the  specification  or  statement  of  work  can  not  be 
sanitized,  an  alternative  is  to  break  out  the  particular 
component  or  subsystem  and  withhold  it  for  U.S.  development 
or  production.  If  a breakout  is  made,  the  interface  must  be 
controlled  and  the  specif iCdVion  and  work  statement  for  the 
remainder  must  document  the  interface.  Breakout  is  facili- 
tated by  building  the  wort  breakdown  structure  with  potential 
releasability  problems  in  mind. 

The  only  other  satisfacto’"y  procedure  in  this  case  is  to 
have  the  NATO  fabricator  »*ely  on  threat  data  supplied  by  his 
national  authorities.  The  end  item  must  then  be  carefully 
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qualification  tested  by  U.S.  military  authorities  to  assure 
that  it  meets  U.S.  or  NATO  requirements. 

U.S.  System  Capabilities/Vulnerabilities  to  NATO  Industry 

This  case  is  most  iiiceiy  to  occur  when  a U.S.  program 
office  is  interested  in  a NATO-developed  system  to  meet  its 
requirement.  Threat  aspects  of  discussions  would  be  handled 
as  above,  but  descriptions  of  deficiencies  in  present  systems 
or  of  unfilled  requirements  constitute  disclosure  of  U.S. 
vulnerabilities  or  lacks  of  capability.  The  best  approach 
in  this  situation  is  again  to  couch  all  discussions  in 
functional  terms;  that  is,  what  we  want  a system  to  do. 

Requests  for  Proposals  where  a NATO  response  is  contemplated 
must  be  sanitized  in  accordance  with  this  principle. 

The  other  likely  occurrence  of  this  case  would  be  the  use 
of  NATO  industry  to  modify  or  overhaul  already  deployed,  U.S. 
developed  systems.  Here  again  the  first  step  is  to  redeter- 
mine that  the  data  being  protected  still  requires  the  previous 
degree  of  protection.  A second  approach  is  viable  in  cases 
where  the  industry's  parent  nation  is  a user  of  the  system. 

In  that  instance,  any  necessary  capability /vulnerability 
information  should  be  supplied  by  the  national  authorities. 

Technology  Transfer  to  NATO  Industry 

Most  difficulties  in  this  category  are  resolved  by 
either  the  export  licensing  process  or  in  the  negotiations 
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leading-  up  to  an  offset  or  co-production  agreement.  Vhere 
releasability  problems  stili  exist  the  best  approaches  are 
ap-ain  to  sanitise  system  enfineerinp"  documents  or  to  break- 
out and  '-\rithhold  the  unrelea sable  components. 

Good  planning?:  is  the  key  to  minimizing  technology 
transfer  problems.  If  the  v\rork  breakdo'.>rn  structure  is  built 
'vith  potential  technolopy  transfer  problems  in  mind,  then 
it  vfill  be  relatively  easy  to  control  interfaces  and  con- 
figurations involving  modules  which  must  be  developed  or 
produced  in  the  United  States,  Similarly,  early  planning  will 
permit  development  of  functional  specifications  and  statements 
of  work.  On  the  other  hand,  trying  to  implement  NATO  offsets 
or  co-production  after  the  fact  is  likely  to  be  both  frus- 
tratinp  and  embarassinp  because  of  delays  or  refusals  in  the 
technolopy  transfer  approval  process. 

Threat  Data  to  Non-NATO  Buyinp  Government 


This  case  must  be  covered  by  a DEA,  Generally  speak- 
ing, sales  of  U,S.  systems  outside  NATO  are  governed  so 
strictly  that  a potential  customer  must  convince  our  pcvern- 
ment  that  he  faces  a threat.  Under  these  circumstances,  re- 
lease of  U,S.  threat  data  with  resnect  to  the  third-party 
buy  of  a NATO-standard  system  is  probably  unwarranted.  If 
it  is  and  a DEA  does  not  cover  the  data,  one  must  be  nego- 
tiated or  modified. 
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U.3.  System  Capabilities/V'ulnerabilities  to  Non-NATO  Buyinp 

Government 

For  the  most  part,  this  case  parallels  the  NATO  p’overn- 
ment  situation.  Once  a sale  has  been  aerreed  to,  there  is 
little  if  any  problem.  During  and  before  negotiations,  a 
DEA  eliminates  the  problem.  In  the  absence  of  a DEA , dis- 
cussions must  be  based  on  open  information.  The  services 
of  foreign  disclosure  and  administrative  security  specialists 
are  invaluable  in  this  situation. 

Technology  Transfer  to  Non-NATO  Buying  Government 

The  most  likely  situation  in  this  category  involves 
repair  and  overhaul  procedures  and  equipment,  Fe^r  problems 
should  arise  in  the  case  of  deployed  systems,  but  if  they  do, 
provisions  must  be  made  to  make  renairs  at  U,S.  or  NATO 
facilities.  In  that  case,  spare  levels  must  be  adjusted  to 
account  for  items  in  the  repair  pipeline.  Here  again, 
neriodic  review  of  classification  guides  and  arranging  for 
an  amlicable  DEA  are  the  easiest  vays  to  head  off  difficulties. 

b.S.  urogram  offices  which  are  acquiring  NATO  developed 
systems  or  equipment  have  an  additional  pitfall  in  this 
category.  If  the  U.S,  has  contributed  any  technology  or 
components  to  the  NATO  manufacturer , the  transfer  must  include 
continuing  U.S.  control  of  that  technology  to  third  parties. 

This  special  case  requires  assistance  of  foreign  disclosure 
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personnel  at  the  time  the  technolop-y  is  transferred  from 
the  I'.S,  Yaitinp  until  transfer  to  a third  party  is 
imminent  v/ill  be  too  late. 


Summary 


r 

The  January  1977  DODD’s  5000,2  and  5000,?  have  directed  j 

imrlementation  of  NATO  standardization  thrcuph  the  mechanism 
of  system  acquisition.  At  the  same  time,  system  acquisition 
orpanizations  are  required  to  maintain  strict  adherence  to 
information  security  and  technolofy  transfer  directives.  The 
poals  of  these  two  policies  can  come  into  conflict  in  the 
nropTam  office.  As  the  renort  of  a DSMC  Tvorkshop  of  propram 
manapers  phrased  it,  ''of  particular  concerr.is  ...  determina- 


tion of  releasable  items  versus  those  which  must  be  safe- 
ruarded"  (9:6), 

It  is  possible  to  minimize  the  difficulties  which  mipht 
otherwise  arise  by  thorouph  analysis  and  careful  "^lanninp. 

The  object  of  this  report  has  been  to  provide  a fr'^ime^fork  for 
that  analysis  and  to  suppest  a few  stratepies  which  mipht  be 
used  in  planninf^.  The  anal5rtical  technique  is  based  on  a 
matrix  whose  entries  are  data  type  and  disclosee  caterory. 

Each  pairinp  represents  a peneral  releasability  situation 
which  can  be  solved,  Csinp  this  matrix  to  identify  a specific 
releasability  problem  from  the  broad  spectrum  of  possible 
problems  is  the  key  to  avoidinp  the  standardization-re] easabil- 
Ity  conflict, 
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The  key  concept  in  dealin^^  with  any  of  the  specific 
categories  of  situations  is  planning,  Vith  proper  planning, 
there  is  time  to  arrange  for  Data  Exchange  Agreements.  Vith 
proper  planning,  the  work  breakdovn  structure  or  specification 
can  be  tailored  to  avoid  releasability  problems,  l^ith  proper 
planning,  alternate  sources  of  threat  models  can  be  explored, 
Vithout  proper  planning,  releasabiJ ity  problems  will  occur. 

Implicit  in  the  strategies  which  are  offered  is  the  need 
to  call  on  functional  areas  which  may  be  neiv  members  of  the 
program  management  team:  foreirn  disclosure  personnel  and 
administrative  security  specialists.  If  potential  problems 
are  analyzed  early  and  if  the  advice  of  these  functional 
specialists  is  sought  early,  any  strategy  for  avoiding  conflict 
can  be  implemented, 

t 

Implications 

In  all  likelihood,  the  drive  for  NATO  standardization 
will  continue.  One  happening  which  supports  this  contention 
is  the  fact  that,  four  days  after  his  inauguration,  Vice 
President  Valter  Mondale  departed  for  Europe  to  reassure  our 
NATO  allies  of  the  continuing  support  of  the  bnited  States, 

As  the  ne'A  DOD  directives  are  applied  and  as  the  drive 
for  NATO  standardization  gathers  steam,  the  effects  of  NATO 
standardization  will  be  felt  In  nearly  every  prop-raw  office. 

As  more  offset  or  co-nroduction  agreements  take  effect,  the 
greater  the  likelihood  that  any  P.S.  program  may  find  that  it 
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i is  expected  to  adct»t  a European  produced  component.  The 

‘ closer  the  alliance  comes  to  total  interoperability,  the 

I preater  the  likelihood  that  any  b.S.  program  may  find  that 

it  is  procuring  its  product  for  a number  of  NATO  nations. 

As  more  and  more  proprams  are  touched  by  NATO  standard- 
ization, the  more  likely  it  is  that  releasabil ity  problems 
will  occur.  The  only  way  to  avoid  these  difficulties,  which 
could  be  detrimental  to  NATO  standardization  and  interoper- 
ability, is  to  adjust  our  system  acquisition  procedures  to 
account  for  NATO  standardization.  The  pay-off  in  both  dollars 
and  combat  effecti\'eness  is  too  preat  to  consider  doinp  other- 

i 

wise. 

Perhaps  the  best  word  to  summarize  the  approach  to 
minimizinp  NATO  standardization  versus  b.S,  data  releasability 
difficulties  is  ” sensitivity".  If  propram  office  personnel 
are  sensitive  to  the  requirement  for  NATO  standardization 
and  realize  their  vway  of  doinp  business  may  have  to  be  al- 
tered, then  the  potential  for  conflict  is  preatly  reduced. 

If  this  report  has  in  any  way  increased  that  sensitivity, 
its  poal  has  been  achieved. 
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